Security of Ministers’ Offices and Communications

Order. Before we come to the next urgent question, I want to say something about the implications for this House of the apparent security breach involving the Department of Health and Social Care. We do not comment on the detail of security arrangements on the Floor of the House. However, I want the House to be reassured that I have directed senior officials to consider what implications there are for security arrangements in the House from the recent event in Whitehall and to take any necessary steps with urgency. I will not take any points of order on this matter.

(Urgent Question): To ask the Minister for the Cabinet Office if he will make a statement on security arrangements relating to ministerial offices and communications.

I appreciate your comments, Mr Speaker, about matters in relation to the House. I am grateful to my hon. Friend the Member for Wellingborough (Mr Bone) for his question and for the chance to address concerns felt across the House about the security of ministerial offices and communications. These are concerns that the Government also take very seriously.

As has been the practice of successive Administrations, the Government do not generally comment on internal security matters. On the specific incident relating to the leak of footage from a security camera to the media, given the public interest in the case I can confirm that the Department of Health and Social Care has launched an investigation that is supported, as appropriate, by the Government security group based in the Cabinet Office. Until the investigation is complete, it would be inappropriate to give further details. I am sorry to hon. Members who will understandably be seeking a lot of details on this matter. It is the case, however, that robust safeguards are in place around the security of Ministers, parliamentarians and Members of devolved legislatures.

My hon. Friend may also want to ask about ministerial communications, which I am happy to go into. Government guidance is that official devices, email accounts and communications applications should be used for communicating classified information. Other forms of electronic communication may be used in the course of conducting Government business, but each Minister is responsible for ensuring that Government information is handled in a secure way. How that is done will depend on the type of information and on the specific circumstances.

Thank you, Mr Speaker, for granting the urgent question and for your comments. I thank the Minister for her response, but it seems to me that the revelations over the weekend that the Secretary of State for Health’s personal office had recording devices in it should be of national concern. If Government and parliamentary offices have recording devices in them—whether audio, visual or both—it is of the utmost concern. Since the disclosure, several Cabinet Ministers have gone on the record to say that they had no knowledge that their offices might be subject to surveillance.

It is totally unacceptable for private conversations between Ministers, civil servants, Members of Parliament and members of the public to be secretly recorded. It also brings into question whether the Wilson doctrine has been broken. Since the premiership of Harold Wilson, it has been a long-standing rule that secret recordings of Members of Parliament by the police, security services or state are outlawed, so I have a number of questions for the Minister on which I hope she will be able to be a little more forthcoming.

First, do the offices of Ministers or Members of Parliament have recording devices in them? If so, who authorised them? Who has access to the recordings? What is the purpose of the recordings? How long are they kept? Has the Wilson doctrine been broken? Are there currently any Members of Parliament under surveillance by the police, intelligence agencies or the state? What measures are taken to ensure that there are no illicit recording devices in ministerial and parliamentary offices? Are they routinely swept for those devices?

Before you answer that, Minister, I should say that you have no responsibility for the House. That is a responsibility of the House that I am looking into, but everything else is fair game.

I appreciate that clarification, Mr Speaker, which is important.

I wish to assure my hon. Friend that we do endorse the Wilson doctrine, and I agree that it is unacceptable should there be any secret recordings within Government offices. My understanding in this case is that this was a CCTV camera operated by the Department of Health and Social Care, which is why it is being investigated by that Department. We do not believe that there are covert concerns at this moment, but there is an ongoing investigation into this, which, unfortunately, we are going to have to be patient on and wait for the details of. But once that investigation has been completed, notwithstanding the security concerns, we will want to provide him with reassurances on a number of the extremely important questions that he has raised.

My hon. Friend also asked about the extent to which offices are regularly swept. There is an organisation called UK NACE—UK National Authority for Counter Eavesdropping. It is the Government lead for counter-eavesdropping and this includes the technical manipulation of protective security systems, including CCTV. This is an area where it works very closely with the Government Security Group. My understanding is that it takes a risk-based assessment when it comes to sweeping, so in Departments where there are particular security sensitivities and concerns, those sweeps are taking place on a relatively regular basis, but Departments are accountable for the way in which their security is maintained within the Departments. The Cabinet Office plays a supporting role through the Government Security Group, setting out standards to which Departments are expected to adhere.

I congratulate the hon. Member for Wellingborough (Mr Bone) on securing this urgent question, and I thank the Minister for her opening comments regarding CCTV and the limitations, but, given how little we currently seem to know, will she come back to the House when she does have some answers regarding this?

Incredibly, this is not even the biggest scandal of the day when it comes to ministerial security and communications, and the Minister alluded to this comments. This morning, a Government spokesperson claimed that all Ministers only conduct Government business through their departmental email addresses yet I have, right here, the minutes of a departmental meeting in which senior civil servants report Government contracts being approved from a Minister’s private email address. Who is telling the truth? It is a pity that the Chancellor of the Duchy of Lancaster could not be here in person, given his personal experience of the perils of using his private emails to conduct ministerial business and to try and avoid freedom of information laws.

And it goes well beyond one Department. Last week, the Cabinet Office refused to answer my questions about the Prime Minister’s mobile phone. Today, it has been reported that he, too, will not deny using private email addresses. Can the Minister now say from the Dispatch Box, categorically and on the record, that no Minister or Prime Minister has used, or does use, private email for Government business, especially when it involves spending public money?

This morning, the Justice Secretary agreed that private email was a huge security issue. He admitted that this revelation does raise legitimate questions. On this, he is right. Now it is time to answer those questions. Will those involved refer themselves to the Information Commissioner so that a genuinely independent investigation can take place? If any Ministers have used private email for Government business, what action will be taken and what will be done to prevent it from happening again? What steps have been and will be taken to preserve private emails as evidence for the public inquiry into the Government’s mishandling of the covid pandemic?

I thank the right hon. Lady for her important questions, which I will seek to answer. It is important to understand that Government guidance is that official devices, email accounts and communications applications should be used for communicating classified information. Other forms of electronic communication may be used in the course of conducting Government business. Each Minister is responsible for ensuring that Government information is handled in a secure way, but how that is done will depend on the type of information and on the specific circumstances.

The right hon. Lady asked about the procurement of personal protective equipment, I believe, or a covid contract that was conducted allegedly via a private email address. I am happy to look into that. But there needs to be understanding of the fact that when we were at the height of the pandemic, a huge volume of correspondence was coming to Ministers via their personal email addresses, their parliamentary email addresses and their ministerial email addresses.

That’s all right, then!

I am not suggesting that there is something we should not be looking into. My point is that—[Interruption.] Perhaps the right hon. Gentleman could wait for me to finish. Some 15,000 offers of help to secure PPE came in following the Prime Minister’s call for assistance. Obviously people wanted to respond to that call, and then we needed to manage the sheer volume of correspondence. The important thing to note is that when PPE offers did come in, they went through the same eight-stage process, so no matter which way those things were communicated, they went through the same process, and that should provide assurance.

Insofar as there are questions to answer, I want to assure the right hon. Lady that we have conducted a number of internal and external inquiries into this matter. There is the Boardman investigation into contracts and there was a National Audit Office investigation into contracts, so I assure her that this matter has already been looked into. She is absolutely right to ask questions and I am absolutely right to reassure her.

I would add that there have been a number of debates on covid contracts in this House, one of which took place in Westminster Hall. I was on maternity leave at the time of the pandemic. I shared the right hon. Lady’s concerns and wanted to understand what had happened, so I responded to a debate in Westminster Hall on those questions and I set out very candidly some of the concerns and challenges that we faced at the height of the pandemic. A number of hon. Members engaged in that debate and asked very legitimate questions to which I responded to the best of my ability. I am not aware that the right hon. Lady has ever engaged in any of those debates. If she wishes to generate a lot of hue and cry over this, that is understandable from a political point of view, but it is my duty to set out the challenges we faced and the ways we are addressing some of the concerns.

I thank my hon. Friend for coming to the Dispatch Box to answer the urgent question from my hon. Friend the Member for Wellingborough (Mr Bone). As she will know, the Wilson doctrine covers deliberate surveillance, so what safeguards are there for whistleblowers who may inadvertently discover material that is in the public interest?

It is important that a distinction is made between material that was inappropriately sourced and then leaked and people who are trying to raise legitimate concerns that require public transparency. I shall look into the concern that my hon. Friend has raised to make sure that there is no blurring of those two very important and distinct issues.

I will follow your strictures precisely, Mr Speaker—all my questions are about ministerial offices.

Was the former Health Secretary aware, and indeed, was the security officer in his Department aware, of the CCTV camera in his office? Is the Minister aware of similar CCTV cameras in any other ministerial office? Who installs such systems in Ministries and who monitors them and has access to their feeds? Do they record video only or is it sound and vision? Given that there were reports of this footage being touted on Instagram for some time, is it true that staff from private companies manage those systems and monitor the footage? If it is true, who is responsible for vetting, and what is the process for vetting, such staff?

Finally, and most importantly, how confident is the Minister that others—states and non-state actors who would do us harm—have not already compromised other staff or gained direct access to some of these CCTV feeds?

Those legitimate concerns will be raised and, I hope, addressed through the Department of Health and Social Care investigation. As I say, the Cabinet Office is there to set the standards, on which we have regular correspondence and engagement with Departments.

The hon. Gentleman raised a number of points—who installs such machines and so on—that we need to look into via the Department of Health and Social Care investigation. My understanding is that it was a CCTV camera, not a covert device. There are obviously questions to answer about the way in which civil servants are vetted—they do go through stringent vetting processes—and in respect of a risk-based approach as to which Departments need to be more regularly swept. I hope that some of the answers that the hon. Gentleman seeks will be answered by the Department of Health and Social Care investigation into this matter.

During a pandemic, the position of Secretary of State for Health and Social Care is one of the most safety-critical roles. People should have been able to have the frankest of conversations with him regarding the nation’s health without fear of being recorded. Throughout this awful crisis there have been a number of leaks, with the most notable being the one before the second lockdown in November last year. Will the Minister assure the House that, along with cameras, ministerial offices should not have microphones hidden in them, and that any review of security will ensure that all ministerial offices are checked for them regularly?

I thank my hon. Friend for raising an important point. As I have said, sweeps are conducted across Departments. Ultimately, the permanent secretaries of Departments are accountable for security within them, but the Cabinet Office sets out clear guidance and continues to liaise with Departments about how that is adhered to. My hon. Friend raises an important point about covert devices, and we all seek the same reassurances as him on these matters.

Crikey, Mr Speaker—who would be a Minister on a day like today?

I do not want to go into the detail of what happened on the day in question, but it occurs to me that the security camera—I think we are accepting that it was a security camera—must surely to goodness have been pretty covert. I know where the security cameras are in my local high street where I live in the highlands. The more we go into this matter, the odder it gets. The public deserve an absolutely open explanation as to what has happened. If the cameras are covert, or semi-covert, why are they? Why does a Secretary of State not know, on a need-to-know basis, about this sort of thing and where the cameras are?